6.6.145longterm
Added
- Define secs_to_jiffies() for time conversion
Changed
- Bluetooth separate CIS_LINK and BIS_LINK link types
- Enable buffer flow control for Bluetooth SCO/eSCO
Fixed
- Fix missing jiffies conversion in deferred_probe_extend_timeout()
- Fix use after free in inode_switch_wbs_work_fn()
- Fix Bluetooth btmtk undefined reference build error
- Fix Bluetooth 6lowpan using chan->conn as indication to no remote netdev
- Fix Bluetooth hci_sync attempting to send HCI_Disconnect to BIS handle
- Fix null pointer dereference in hci_abort_conn()
- Fix incorrect buffered IO fallback for append direct writes in btrfs
- Fix false IO failure after falling back to buffered write in btrfs
- Fix potential integer overflow in audit_log_n_hex()
- Fix restarting state leak on allocation failure in crypto qat
- Fix u32 overflow in check_and_correct_requested_length in hfs/hfsplus
- Prevent getting negative values of offset/length in hfs/hfsplus
- Fix out-of-bounds bit access on mt_io_flags in HID multitouch
- Fix use-after-free in l2cap_sock_new_connection_cb()
- Fix cyclic locking warning on netdev unregister in Bluetooth 6lowpan
- Fix OOB reads in rtl8723bs rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()
- Fix resource tree corruption when BAR resize fails in PCI
The 110 most recent commits in this release — the full changelog is longer:
- Linux 6.6.145
- selftests/bpf: Add simple strscpy() implementation
- tools/testing: add linux/args.h header and fix radix, VMA tests
- driver core: Guard deferred probe timeout extension with delayed_work_pending()
- driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout()
- jiffies: Cast to unsigned long in secs_to_jiffies() conversion
- jiffies: Define secs_to_jiffies()
- writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount()
- writeback: Fix use after free in inode_switch_wbs_work_fn()
- xfs: fix stupid compiler warning
- Bluetooth: btmtk: remove #ifdef around declarations
- Bluetooth: btmtk: Fix btmtk.c undefined reference build error harder
- selftests/hid: ensure CKI can compile our new tests on old kernels
- Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev
- Bluetooth: hci_sync: Fix attempting to send HCI_Disconnect to BIS handle
- Bluetooth: hci_core: Remove check of BDADDR_ANY in hci_conn_hash_lookup_big_state
- ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd
- seqlock: fix scoped_seqlock_read kernel-doc
- KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers
- Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()
- Bluetooth: hci_sync: annotate data-races around hdev->req_status
- Bluetooth: separate CIS_LINK and BIS_LINK link types
- Bluetooth: hci_core: Enable buffer flow control for SCO/eSCO
- btrfs: fix incorrect buffered IO fallback for append direct writes
- btrfs: fix false IO failure after falling back to buffered write
- exfat: preserve benign secondary entries during rename and move
- exfat: move exfat_chain_set() out of __exfat_resolve_path()
- exfat: add exfat_get_dentry_set_by_ei() helper
- exfat: rename argument name for exfat_move_file and exfat_rename_file
- exfat: remove unnecessary read entry in __exfat_rename()
- exfat: move free cluster out of exfat_init_ext_entry()
- mm: do file ownership checks with the proper mount idmap
- regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
- regulator: scmi: Simplify with scoped for each OF child loop
- audit: fix potential integer overflow in audit_log_n_hex()
- audit: add audit_log_nf_skb helper function
- crypto: qat - fix restarting state leak on allocation failure
- btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC
- usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile
- nvmet-auth: validate reply message payload bounds against transfer length
- nvmet: return DHCHAP status codes from nvmet_setup_auth()
- nvmet: remove superfluous initialization
- usb: gadget: f_fs: initialize reset_work at allocation time
- crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A
- crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0
- usb: typec: tcpm: Fix VDM type for Enter Mode commands
- usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
- usb: iowarrior: remove inherent race with minor number
- bpf: Allow LPM map access from sleepable BPF programs
- bpf: Consistently use bpf_rcu_lock_held() everywhere
- hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
- hfs/hfsplus: prevent getting negative values of offset/length
- serial: 8250_mid: Disable DMA for selected platforms
- serial: 8250_mid: Remove 8250_pci usage
- HID: appleir: fix UAF on pending key_up_timer in remove()
- treewide: Switch/rename to timer_delete_sync
- proc: protect ptrace_may_access() with exec_update_lock (part 1)
- seqlock: Change do_task_stat() to use scoped_seqlock_read()
- seqlock: Introduce scoped_seqlock_read()
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled
- HID: multitouch: fix out-of-bounds bit access on mt_io_flags
- HID: add haptics page defines
- perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box()
- writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()
- writeback: Avoid contention on wb->list_lock when switching inodes
- proc: protect ptrace_may_access() with exec_update_lock (FD links)
- proc: rename proc_setattr to proc_nochmod_setattr
- ksmbd: track the connection owning a byte-range lock
- ksmbd: centralize ksmbd_conn final release to plug transport leak
- ksmbd: use opener credentials for FSCTL mutations
- smb: client: resolve SWN tcon from live registrations
- smb: client: Improve unlocking of a mutex in cifs_get_swn_reg()
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()
- Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister
- Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock
- netfilter: ebtables: zero chainstack array
- netfilter: ebtables: Use vmalloc_array() to improve code
- media: nxp: imx8-isi: Fix use-after-free on remove
- media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code
- media: nxp: imx8-isi: Convert to platform remove callback returning void
- gpio: sch: use raw_spinlock_t in the irq startup path
- coresight: etb10: restore atomic_t for shared reading state
- mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()
- mm: shrinker: remove redundant shrinker_rwsem in debugfs operations
- Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()
- staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()
- staging: rtl8723bs: fix spaces around binary operators
- staging: rtl8723bs: core: move constants to right side in comparison
- PCI: Skip Resizable BAR restore on read error
- PCI: Move Resizable BAR code to rebar.c
- PCI: Add kerneldoc for pci_resize_resource()
- PCI: Fix restoring BARs on BAR resize rollback path
- PCI: Free saved list without holding pci_bus_sem
- PCI: Prevent resource tree corruption when BAR resize fails
- PCI: mediatek: Fix IRQ domain leak when port fails to enable
- PCI: mediatek: Use generic MACRO for TPVPERL delay
- PCI: mediatek: Convert bool to single quirks entry and bitmap
- PCI: controller: Use dev_fwnode() instead of of_fwnode_handle()
- PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
- vfio/mlx5: Fix racy bitfields and tighten struct layout
- PCI: altera: Fix resource leaks on probe failure
- ALSA: aoa: check snd_ctl_new1() return value
- iio: common: st_sensors: honour channel endianness in read_axis_data
- bitops: make BYTES_TO_BITS() treewide-available
- iio: pressure: mpl115: fix runtime PM leak on read error
- iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading
- iio: imu: inv_icm42600: stabilized timestamp in interrupt
- iio: invensense: fix timestamp glitches when switching frequency
- iio: invensense: remove redundant initialization of variable period